Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139362e302f32342d3234203d3e2034373636.roa
File:                     37342e3132342e3139362e302f32342d3234203d3e2034373636.roa (raw, json)
Hash identifier:          O/MNrLB4memNZZIu9BuMjgaq4NWffmYamxUxPES+52A=
Subject key identifier:   F7:53:9F:54:E2:85:E8:63:89:78:AD:D6:A8:5C:F1:7F:3B:90:E5:A7
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       2FC1E4A2AEF279A1279ED4F3B0D2AB065573AE29
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139362e302f32342d3234203d3e2034373636.roa
Signing time:             Wed 31 Jul 2024 05:47:54 +0000
ROA not before:           Wed 31 Jul 2024 05:42:54 +0000
ROA not after:            Wed 30 Jul 2025 05:47:54 +0000
asID:                     4766
IP address blocks:        74.124.196.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c1:e4:a2:ae:f2:79:a1:27:9e:d4:f3:b0:d2:ab:06:55:73:ae:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jul 31 05:42:54 2024 GMT
            Not After : Jul 30 05:47:54 2025 GMT
        Subject: CN=F7539F54E285E8638978ADD6A85CF17F3B90E5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:66:c1:26:63:a0:2f:79:13:3a:25:f2:01:
                    78:ba:a1:80:a0:5f:fc:c5:75:79:9e:ca:b6:09:e0:
                    12:a4:56:b5:37:e2:ff:dc:14:8a:8a:83:3e:71:39:
                    99:44:ec:78:40:00:8a:7d:c6:f0:8f:ff:84:b6:51:
                    25:f2:8f:8b:4c:30:18:7d:77:c5:18:6d:bf:39:f1:
                    ca:7d:b2:b6:56:36:fb:38:b2:3f:2f:e7:21:42:2b:
                    f8:ef:c8:e7:2e:75:ec:e1:b3:bf:4c:b9:0b:89:41:
                    b4:27:e6:1c:3e:0f:f8:1d:64:5c:69:cd:b0:a2:c6:
                    3d:4b:b7:ff:0c:7c:58:cf:7c:a0:b1:67:a3:39:42:
                    c0:5b:9b:07:b5:16:91:dc:39:12:4b:61:a8:4a:e0:
                    ab:bd:4f:1b:88:f0:14:47:b3:aa:bc:1e:3c:1f:7a:
                    a8:1b:94:cb:22:99:8d:82:bc:0a:6b:dd:20:de:8f:
                    6c:8a:28:f8:8c:c2:24:d3:bb:52:24:5e:2b:cf:db:
                    06:3e:d8:56:e4:22:9c:de:a9:6a:f3:d4:64:49:5e:
                    7c:8b:ca:5a:8b:07:82:00:36:e3:00:68:87:45:96:
                    e7:3c:6e:25:df:a0:13:5e:ed:88:79:9a:a0:9e:f3:
                    81:bb:74:7c:60:76:e2:40:ca:68:ee:18:13:2e:42:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:53:9F:54:E2:85:E8:63:89:78:AD:D6:A8:5C:F1:7F:3B:90:E5:A7
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139362e302f32342d3234203d3e2034373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:95:4c:2c:11:0c:35:78:39:5c:e7:8e:ab:a2:6a:e0:dd:86:
         d7:c9:23:50:f1:92:7b:ff:8e:86:12:c0:8d:1b:14:1c:0e:c9:
         4a:0e:5b:e9:8f:9f:dd:ec:15:18:22:cb:21:32:43:fd:fb:f4:
         2b:75:ff:c6:d1:55:b8:a2:97:a0:06:77:28:67:13:9f:86:03:
         90:b6:13:84:73:80:e4:48:c3:f4:ee:7f:59:1a:e1:d2:72:f1:
         7d:c6:f1:40:ce:b2:08:58:30:35:f2:79:48:74:d6:72:5a:b8:
         92:df:82:26:77:d3:3d:b8:55:55:4c:65:c6:5e:07:2c:74:60:
         d6:50:ca:c3:6a:12:a6:88:b5:53:9a:54:fc:f8:a1:74:df:55:
         a0:ed:a2:21:9d:73:70:e1:31:89:eb:35:62:01:9c:48:da:d7:
         6d:f0:5e:32:85:48:a4:e1:a8:17:fb:04:c8:a1:cb:03:02:37:
         8f:73:dd:99:32:45:ca:65:9a:a2:09:ac:75:59:0c:ff:b1:80:
         b0:05:d7:5c:94:44:0f:6f:f7:b0:fd:83:46:5d:0b:5a:6b:dd:
         76:00:e2:c3:c7:f6:3d:d3:c3:9e:ca:70:35:7a:4b:19:68:56:
         3a:2e:24:62:86:e6:10:01:35:ab:8b:96:91:60:fd:78:e2:31:
         bf:85:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----